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In the Claims 

1. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists* proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that have unique 
user names and passwords for each user account including an administrator account that 
is self-configuring and regular accounts with varying amounts of administrative 
privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and an unfriendly outbound list only one of which is active at any given 
time, and having a friendly inbound list and an unfriendly inbound list only one of which 
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is active at any given time, the friendly outbound list, the unfriendly outbound list, the 
friendly inbound list and the unfriendly inbound lists being uniquely configurable by each 
user, 

said first proxy server programmed to receive a request from an HTTP client and 
nogiotor tho roquoot in q logfil e of all w e b sites r e qu e st e d by a us e r , check the identity of a 
requesting client and/or of a requested URL against the friendly inbound, friendly 
outbound, unfriendly inbound or unfriendly outbound list maintained by the 
administrative module and then either approve the request, terminate the request or re- 
route the request without the knowledge of the user, 

a second proxy server without the administrative module or the friendly or the 
unfriendly list placed between the first proxy server and the Internet located at a gateway 
of the local area network or at an Internet Service Provider of the local area network, the 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
known only to a holder of the administrator account or a regular account with 
administrative privileges, 

the first proxy server and the second proxy server have a network communication 
link between them. 

2. (original) The system of claim 1, wherein the second proxy server is a first 
proxy server but has an empty unfriendly outbound list. 

3. (original) The system of claim 1, wherein a third proxy server and/or additional 
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proxy servers forward inbound requests for resources to other proxy servers. 

4. (previously presented) The system of claim 1, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

5. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that have unique 
user names and passwords for each user account including an administrator account that 
is self-configuring and regular accounts with varying amounts of administrative 
privileges, 
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a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fist proxy server having a friendly 
outbound list and an unfriendly outbound list only one of which is active at any given 
time, and having a friendly inbound list and an unfriendly inbound list only one of which 
is active at any given time, the friendly outbound list, the unfriendly outbound list, the 
friendly inbound list and the unfriendly inbound lists being uniquely configurable by each 
user, 

said first proxy server programmed to receive a request from an HTTP client m& 
register the requ e st in a logfil e of all w e b sites r e qu e sted by a us e r , check the identity of a 
requesting client and/or of a requested URL against the friendly inbound, friendly 
outbound, unfriendly inbound or unfriendly outbound list maintained by the 
administrative module and then either approve the request, terminate the request or re- 
route the request without the knowledge of the user, 

a second proxy server without the administrative module and without a the 
friendly or the unfriendly list placed between the first proxy server and the Internet 
located at a gateway of a the local area network or at an Internet Service Provider of the 
local area network, the second proxy server being capable of communicating to a proxy 
of a destination or directly to a destination, said second proxy server having an Internet 
Protocol address known only to a holder of the administrator account or a regular account 
with administrative privileges, 

the first proxy server and the second proxy server have a communication link 
between them, 

and wherein inbound communications arc arranged so that an actual location of an 
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important resource is located in an unpublished location that is a replacement location to 
which requests rejected by the first proxy server are rerouted, wherein approved users are 
listed in the first proxy server in the unfriendly inbound list and are sent by the first proxy 
server to the replacement location, and wherein unapproved users are not listed in the 
unfriendly inbound list and have their request sent to a published address that contains 
unimportant information. 

6, (original) The system of claim 5, wherein the second proxy server is a first 
proxy server but has an empty unfriendly outbound list. 

7. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising; 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
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access levels and being capable of creating three types of user accounts that have unique 
user names and passwords for each user account including an administrator account that 
is self-configuring and regular accounts with varying amounts of administrative 
privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and an unfriendly outbound list only one of which is active at any given 
time, and having a friendly inbound list and an unfriendly inbound list only one of which 
is active at any given time, the friendly outbound list* the unfriendly outbound list, the 
friendly inbound list and the unfriendly inbound lists being uniquely configurable by each 
user, 

said first proxy server programmed to receive a request from an HTTP client and 
r e gist e r th e r e quest in a logftlo of all wob Gitos requested by a us e r , check the identity of a 
requesting client and/or of a requested URL against the friendly inbound, friendly 
outbound, unfriendly inbound or unfriendly outbound list maintained by the 
administrative module and then either approve the request, terminate the request or re- 
route the request without the knowledge of the user, 

and wherein inbound communications are arranged so that an actual location of a 
highly sensitive resource is located in an unpublished location that is a replacement 
location to which requests rejected by the first proxy server are rerouted, wherein 
approved users are listed in the first proxy server in the unfriendly inbound list and are 
sent by the proxy server to the replacement location, wherein unapproved users are not 
listed in the unfriendly inbound list and have their request sent to a published address that 
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contains unimportant information. 

8. (original) The system of claim 7 % wherein the range of access levels ranges 
from maximum 100% access to full suspension. 

9. (previously presented) The system of claim 1, wherein the three types of user 
accounts that have unique user names and passwords for each user account include an 
administrator account that is self-configuring, regular accounts with administrative 
privileges other than the privilege to create additional accounts or view information on 
any other accounts and regular accounts without administrative privileges and in addition 
a fourth type of user account namely one anonymous guest user account to be used by 
general users who have no system-based user name and password. 

10. (previously presented) The system of claim 5» wherein the three types of user 
accounts that have unique user names and passwords for each user account include an 
administrator account that is self-configuring, regular accounts with administrative 
privileges other than the privilege to create additional accounts or view information on 
any other accounts and regular accounts without administrative privileges and in addition 
a fourth type of user account namely one anonymous guest user account to be used by 
general users who have no system-based user name and password. 

1L (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and for 
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controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address* 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that have unique 
user names and passwords for each user account including an administrator account that 
is self-configuring and regular accounts with varying amounts of administrative 
privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fist proxy server having a friendly 
outbound list and an unfriendly outbound list only one of which is active at any given 
time, and having a friendly inbound list and an unfriendly inbound list only one of which 
is active at any given time, the friendly outbound list, the unfriendly outbound list, the 
friendly inbound list and the unfriendly inbound list being uniquely configurable by each 
user, and 

said first proxy server programmed to receive a request from an HTTP client and 
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register tho re q uest in a logfilo of all web citoo requested by a user , check the identity of a 
requesting client and/or of a requested URL against the friendly inbound, friendly 
outbound, unfriendly inbound or unfriendly outbound list maintained by the 
administrative module and then either approve the request* terminate the request or re- 
route the request without the knowledge of the user. 

12. (previously presented) The system of claim 1 1, wherein the first proxy server 
is in each and every user computer. 

13. (previously presented) The system of claim 12, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

14. (previously presented) The system of claim I, wherein the first proxy server is 
in each and every user computer, 

15. (previously presented) The system of claim 14 t wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

16. (previously presented) The system of claim 5, wherein the first proxy server is 
in each and every user computer. 

17. (previously presented) The system of claim 16, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 
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18. (previously presented) The system of claim 7, wherein the first proxy server is 
in each and every user computer. 

19. (previously presented) The system of claim 18, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

20. (previously presented) The system of claim 1, wherein the range of access 
levels ranges from maximum 100% access to fall suspension. 

21. (previously presented) The system of claim 5, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

22. (previously presented) The system of claim 11, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

23. (previously presented) The system of claim 5, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

24. (previously presented) The system of claim 23, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 
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25. (previously presented) The system of claim 7, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

26. (previously presented) The system of claim 25, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

27. (previously presented) The system of claim 11, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

28. (previously presented) The system of claim 27. wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

29. (previously presented) The system of claim 7* wherein the three types of user 
accounts that have unique user names and passwords for each user account include an 
administrator account that is self-configuring, regular accounts with administrative 
privileges other than the privilege to create additional accounts or view information on 
any other accounts and regular accounts without administrative privileges and in addition 
a fourth type of user account namely one anonymous guest user account to be used by 
general users who have no system-based user name and password. 

30. (previously presented) The system of claim 11. wherein the three types of user 
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accounts that have unique user names and passwords for each user account include an 
administrator account that is self-configuring* regular accounts with administrative 
privileges other than the privilege to create additional accounts or view information on 
any other accounts and regular accounts without administrative privileges and in addition 
a fourth type of user account namely one anonymous guest user account to be used by 
general users who have no system-based user name and password. 

31. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting* searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that have unique 
user names and passwords for each user account including an administrator account that 
is self-configuring and regular accounts with varying amounts of administrative 



13 

PAGE 15/26 • RCVD AT M2005 10:49:45 AM [Eastern Standard Time] 4 SVR:USPT0-EFXRF-1/1 1 DN1S:8729306 1 CS1D:212 685 6862 ' DURATION (mrMS):0742 



FILE No.383 03/30 '05 10:39 ID:NEWT1AN & BERGER 



FAX: 212 685 6862 



PAGE 16/ 26 



privileges, a first proxy server in one or a plurality of user computers of a local area 
network with access to the world wide web 7 each of said fist proxy server having a 
friendly outbound list and an unfriendly outbound list only one of which is active at any 
given time, and having a friendly inbound list and an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list being uniquely configurable by 
each user, 

said first proxy server programmed to receive a request from an HTTP client and 
regist e r th e requ e st in a. logfil e of all w e b sit e s r e qu e st e d by a user, check the identity of a 
requesting client and/or of a requested URL against the friendly inbound, friendly 
outbound, unfriendly inbound or unfriendly outbound list maintained by the 
administrative module and then either approve the request, terminate the request or re- 
route the request without the knowledge of the user, 

a second proxy server without the administrative module and without the friendly 
or the unfriendly list placed between the first proxy server and the Internet located at a 
gateway of the local area network or at an Internet Service Provider of the local area 
network, the second proxy server being capable of communicating to a proxy of a 
destination or directly to a destination, said second proxy server having an Internet 
Protocol address known only to a holder of the administrator account or a regular account 
with administrative privileges, 

the first proxy server and the second proxy server have a communication link 
between them, 

and wherein inbound communications are arranged so that an actual location of an 
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important resource is located in an unpublished location thai is a replacement location to 
which requests rejected by the first proxy server are rerouted, wherein approved users are 
not listed in the first proxy server in the friendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein unapproved users are listed in the 
friendly inbound list and have their request sent to a published address that contains 
unimportant information. 

32. (previously presented) The system of claim 31 > wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

33. (previously presented) The system of claim 31, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

34. (previously presented) The system of claim 33, wherein the range of access 
levels ranges from maximum 100% access to full suspension* 

35. (previously presented) The system of claim 31 1 wherein the three types of user 
accounts that have unique user names and passwords for each user account include an 
administrator account that is self-configuring, regular accounts with administrative 
privileges other than the privilege to create additional accounts or view information on 
any other accounts and regular accounts without administrative privileges and in addition 
a fourth type of user account namely one anonymous guest user account to be used by 
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general users who have no system-based user name and password. 

36. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that have unique 
user names and passwords for each user account including an administrator account that 
is self-configuring and regular accounts with varying amounts of administrative 
privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and an unfriendly outbound list only one of which is active at any given 
time, and having a friendly inbound list and an unfriendly inbound list only one of which 
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is active at any given time, the friendly outbound list, the unfriendly outbound list, the 
friendly inbound list and the unfriendly inbound list being uniquely configurable by each 
user, 

said first proxy server programmed to receive a request from an HTTP client and 
regist e r th e request in a l o gfil o of all w e b sit e s r e quested by a uoor , check the identity of a 
requesting client and/or of a requested URL against the friendly inbound, friendly 
outbound, unfriendly inbound or unfriendly outbound list maintained by the 
administrative module and then either approve the request, terminate the request or re- 
route the request without the knowledge of the user, 

and wherein inbound communications are arranged so that an actual location of a 
important resource is located in an unpublished location that is a replacement location to 
which requests rejected by the first proxy server are rerouted, wherein approved users are 
not listed in the first proxy server in the friendly inbound list and are sent by the proxy 
server to the replacement location, wherein unapproved users are listed in the friendly 
inbound list and have their request sent to a published address that contains unimportant 
information, 

37, (previously presented) The system of claim 36, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

38, (previously presented) The system of claim 36, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 



17 



PAGE 18/26 * RCVD AT 3/30/2005 10:49:45 AM [Eastern Sandard frnie] 1 SVRiUSPTO-EFXRF-M * DNIS:8729306 ' CSID:212 685 6862 * DURATION ^nm-ss):07-42 



FILE No. 383 03/30 '05 10:40 ID:NEWT1AN & BERGER 



FAX:212 685 6862 



PAGE 20/ 26 



39. (previously presented) The system of claim 38, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

40. (previously presented) The system of claim 36, wherein the three types of user 
accounts that have unique user names and passwords for each user account include an 
administrator account that is self-configuring, regular accounts with administrative 
privileges other than the privilege to create additional accounts or view information on 
any other accounts and regular accounts without administrative privileges and in addition 
a fourth type of user account namely one anonymous guest user account to be used by 
general users who have no system-based user name and password 

41. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, proxy chaining routing, adding and deleting 
users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
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access levels and being capable of creating three types of user accounts that have unique 
user names and passwords for each user account including an administrator account that 
is self-configuring_and regular accounts with varying amounts of administrative 
privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable by each user, 

said first proxy server programmed to receive a request from an HTTP client and 
register tho roquoot in a logfilo of all wob oitoo roquootod by a uo e r , check the identity of a 
requested URL against the friendly outbound list or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request without the knowledge of the user, 

a second proxy server without the administrative module or the friendly or the 
unfriendly list placed between the first proxy server and the Internet located at a gateway 
of the local area network or at an Internet Service Provider of the local area network, the 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
known only to a holder of the administrator account or a regular account with 
administrative privileges, 

the first proxy server and the second proxy server have a network communication 
link between them. 
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42. (previously presented) The system of claim 41, wherein the three types of user 
accounts that have unique user names and passwords for each user account include an 
administrator account that is self-configuring, regular accounts with administrative 
privileges other than the privilege to create additional accounts or view information on 
any other accounts and regular accounts without administrative privileges and in addition 
a fourth type of user account namely one anonymous guest user account to be used by 
general users who have no system-based user name and password. 

43. (previously presented) The system of claim 41, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

44. (previously presented) The system of claim 41 wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

45. (previously presented) The system of claim 44, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

46. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 

a plurality of computer users, 
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one or a plurality of u$er computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, proxy chaining routing, adding and deleting 
users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that have unique 
user names and passwords for each user account including an administrator account that 
is self-configuring and regular accounts with varying amounts of administrative 
privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fist proxy server having a friendly 
outbound list and an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable by each user, and 

said first proxy server programmed to receive a request from an HTTP client md 
register tho requ e st in a logfilo of all w e b oitoo r e qu e sted by n ufior , check the identity of a 
requested URL against the friendly outbound or unfriendly outbound list maintained by 
the administrative module and then either approve the request, terminate the request or 
re-route the request without the knowledge of the user. 

47. (previously presented) The system of claim 46, wherein the three types of user 
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accounts that have unique user names and passwords for each user account include an 
administrator account that is self-configuring, regular accounts with administrative 
privileges other than the privilege to create additional accounts or view information on 
any other accounts and regular accounts without administrative privileges and in addition 
a fourth type of user account namely one anonymous guest user account to be used by 
general users who have no system-based user name and password. 

48. (previously presented) The system of claim 46, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

49. (previously presented) The system of claim 46 wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

50. (previously presented) The system of claim 49, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

51. (new) The system of claim 1, wherein said first proxy server is also 
programmed to register the request in a logfile of all web sites requested by a user. 

52. (new) The system of claim 5, wherein said first proxy server is also 
programmed to register the request in a logfile of all web sites requested by a user. 
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53. (new) The system of claim 7, wherein said first proxy server is also 
programmed to register the request in a logfile of all web sites requested by a user. 

54. (new) The system of claim 11, wherein said first proxy server is also 
programmed to register the request in a logfile of all web sites requested by a user. 

55. (new) The system of claim 31, wherein said first proxy server is also 
programmed to register the request in a logfile of ail web sites requested by a user. 

56. (new) The system of claim 36, wherein said first proxy server is also 
programmed to register the request in a logfile of all web sites requested by a user. 

57. (new) The system of claim 41, wherein said first proxy server is also 
programmed to register the request in a logfile of all web sites requested by a user. 

58. (new) The system of claim 46, wherein said first proxy server is also 
programmed to register the request in a logfile of alt web sites requested by a user. 



23 



PAGE 25/26 1 RCVD AT 3000005 10:49:45 AM [Eastern Standard Tine] 1 SVR:USPT0-EFXRF-1/1 1 DNIS:8729306 « CSID:212 685 6862 1 DURATION (mm-ss):0742 



